Re: ipfw2 NAT/forwarding config for bittorrent

2005-10-25 Thread Richard Burakowski

Kenneth W Cochran wrote:


How do I configure ipfw2 for properly forwarding the bittorrent
ports (6881-6889) to the destination machine?  Log_in_vain is
 


natd(8) -redirect_port
ipfw will just forward the packet where as natd will rewrite it
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: traffic accounting per username with ipfw in 5.4 ? (more)

2005-10-25 Thread Richard Burakowski



I notice that the traffic accounting per uid only applies to traffic
initiated by that user, and initiated from the local machine.  If I scp a

I've looked a bit into this, and it appears that sshd changes uid in FreeBSD 
6.0 (I use 6.0RC1) .. I bet upgrading the system would be a lot easier than 
constructing a complex  traffic-accounting system.. I'd think so at least..



sshd_config(5) UsePrivilegeSeparation



cd /usr/ports
make search key=accounting
...
Port:   ipacctd-1.46_1
Path:   /usr/ports/net-mgmt/ipacctd
Info:   IP accounting using divert socket
Maint:  [EMAIL PROTECTED]
...
among others
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: diskless FreeBSD with grub

2005-11-02 Thread Richard Burakowski

Daniel Hepper wrote:


Hi,

I want to boot diskless into FreeBSD-5.4 with grub.

snip
title bsd-nfsroot
kernel (nd)/kernel/kernel ip=dhcp root=/dev/nfs
nfsroot=141.2.71.253:/dta/fBSD_diskless
boot
/snip

It loads the kernel, but does not boot. My guess is that it doesn't find
the root partition.

if you look carefully, it's telling you where it thinks the root 
partition is.  if that looks right, then check your nfs server log.


you have seen the diskless booting howto on freebsd.org (among others) 
and recompiled your kernel for diskless booting? IIRC the kernel goes 
through a second round of querying dhcp for info.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to sort find results

2005-11-07 Thread Richard Burakowski

David Fleck wrote:


On Mon, 7 Nov 2005, Jeffrey Ellis wrote:


But when I try:

# ./date_sort /

I get:

use: bad interpreter: No such file or directory


usual suspect is Carriage Return/Line Feed line term instead of just 
Line Feed.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to sort find results

2005-11-08 Thread Richard Burakowski

Jeffrey Ellis wrote:


Hi, Richard --

Do you mean in David's script (I have heard of that happening before with
copy and paste)?

How can I tell if that's the case? And how would I go about fixing it?
 


that's right, in the script that's trying to run.

usually with the default vi, you should see ^M at the end of every 
line.  from vi :%s/^M$//g where ^M is CTRL-V-M, amomg others

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Root powerless?

2005-11-20 Thread Richard Burakowski

Brooke Landers wrote:


srv-0021# w
2:33AM  up  1:57, 1 user, load averages: 0.00, 0.00, 0.00
USER TTY  FROM  LOGIN@  IDLE WHAT
root p0   192.168.36.2 2:33AM - w


as root: id

[EMAIL PROTECTED] ~]# id
uid=0(root) gid=0(wheel) groups=0(wheel), 5(operator)

you should have uid=0
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: iSCSI support

2005-11-23 Thread Richard Burakowski

[EMAIL PROTECTED] wrote:


I have 3 datacentres connected by 12 core gig fibre (only using one pair
at the moment, but the fibre is there for future use) each connected
directly to the others.  I want a system that I can start off with one
disk server in one datacentre, and then step it up to have mirrored disk
servers in each of the other datacentre's which are kept up to date in
real time and can take over instantaneously if one of the others fails.

It must also be scalable (non destructive resizing of the system) and
support both linux and FreeBSD.  I am willing to wait for this, but can
anyone point me in the right direction.  iSCSI seems to be it, but I'm
not sure.
 

all, don't get network attached storage confused with network attached 
filesystem confused with clustered filesystem.


if you go for fibre channel network attached storage, it dosen't matter 
if the host and storage array are in the same cabinet, across the room 
or in different data centers.  if your requirement is only to have one 
host up at any time then it can raid1 3way mirror over the sites.


of course it gets really messy when one of the links goes down and you 
have to decide if it really has and not just the way your testing, who 
becomes master and enforce it so there's no corruption (if the down 
host continues writing).


you mention multiple cores and the datacenters connectected in a ring, 
which means you can multipath in both directions of the loop.  don't 
know of any fc multipathing for freebsd.


doing this in iscsi will be a lot cheaper.  switches will be gigE with 
fibre uplinks to connect the sites.  targets and initiators can be 
regular boxes with more/less/none directly attached disks, all connected 
via gig nics.  multipathing/link failures are handled by routing 
daemons/protocols which already exist.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mpd and sessions

2006-03-09 Thread Richard Burakowski

gahn wrote:


Hi:

I am using mpd for my vpn service. It works fine and I
have no compalints. But is anyway I can monitor that
how many sessions are being used?


integrate it with something like freeradius to keep accounting (at least).
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: using KVM switch /dev/psm0 is missing

2006-03-22 Thread Richard Burakowski

Malcolm Fitzgerald wrote:

I have a no name 2 port KVM switch and a Logitech marble mouse USB with a ps/2 
adapter.


my cheapo noname kvm presents it's ps2 keyboard and mouse ports as usb 
devices.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: using KVM switch /dev/psm0 is missing

2006-03-22 Thread Richard Burakowski

Malcolm Fitzgerald wrote:



On 22/03/2006, at 8:40 PM, Richard Burakowski wrote:


Malcolm Fitzgerald wrote:

I have a no name 2 port KVM switch and a Logitech marble mouse USB 
with a ps/2 adapter.


my cheapo noname kvm presents it's ps2 keyboard and mouse ports as 
usb devices.



Does yours have USB cabling to match or does it have ps2 cables?

malcolm

it takes two ps2 (key+mouse) and three usb in - then one usb (2 total) 
out to each box.  then there's the video of course.
when the kvm switches, the usb devices are detached and then attached to 
the new target, which means there's a discernable lag (couple seconds) 
before they become active.  also requires moused under x11 as the 
/dev/ums entry comes and goes - dosen't have the same issue with the 
keyboard.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portupgrade log

2006-02-21 Thread Richard Burakowski

eoghan writes:

 

Im wondering if there is a log file generated by portupgrade and  
where i would find it?
   


see PORTUPGRADE_ARGS in pkgtools.conf
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portupgrading only certain ports

2006-02-22 Thread Richard Burakowski

Steve P. wrote:


I am trying to avoid upgrading two ports: kde and X.
 


HOLD_PKGS in pkgtools.conf
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portupgrade -s and NFS /usr/ports?

2006-02-26 Thread Richard Burakowski

Scott Mitchell wrote:


 performance reasons.  However, I want downloaded distfiles and built
 packages to go in /usr/ports where other machines can see them, but there

i don't save packages but i do have clients downloading into distifiles 
as req'd by having /usr/ports and /usr/ports/distfiles as seperate 
filessystems.   /usr/ports is  then mounted readonly and 
/usr/ports/distfiles readwrite with maproot etc.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Parallel shell scripts.

2006-11-09 Thread Richard Burakowski

nicky wrote:
The whole idea is this. I have to extract two different databases to 
csv files. One takes about an 1 hour, the other 1.5 hours. The problem 
is my time window, which is 2 hours. So extracting one after the other 
is not an option. After both extractions are complete, it should load 
the csv files into a target database.




sounds just like a Makefile.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup multiple RELENGs?

2005-08-24 Thread Richard Burakowski

Joel Hatton wrote:


Hi,

Situation - I have a machine that I use to build the base system for
others. I'd like to be able to have multiple copies of /usr/src for
different releases - in particular, RELENG_5_3 and RELENG_5_4. Rather than
just changing my RELENG in the supfile and blowing away the tree each time
I thought I could maintain multiple source trees.  One trivial way that
came to mind would be to copy /usr/src to /usr/RELENG_5_3 and
/usr/RELENG_5_4 and replace /usr/src with a symlink that points to the one
I'm using at the time - I don't know if this makes perfect sense, it's
just an idea :)
 


from my supfile

src-all   tag=RELENG_5_4 prefix=/usr/releases/RELENG_5_4

and you can repeat that line for each release you want to follow.  
wouldn't suprise me if
/usr/src isn't actually hardcoded into the build and it'll work with the 
src tree somewhere

else, though i've always soft linked from /usr/src.

otherwise, i'm not sure how wise it is to build different releases with 
a different base system

and different kernel. might want to take a look at /usr/src/release.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD routing

2005-10-16 Thread Richard Burakowski

Bob Hepple wrote:

I won't expect that this will work at all, even not with Linux, because 
the IP 192.168.254.245 and 192.168.2.214 are of different subnets. 
Either you use 192.168.254.0/24 or 192.168.2.0/24 in the 10baseT net, 
but not both. I don't know if Linux makes it possible to do this; I 
haven't tried it yet. At least I can reproduce your error message with a 
similar setup. Just assign the IP 192.168.2.245 to rl0 for example; then 
it should work without problems.


Regards
Björn
   



The reason I'm doing it this way is that I have machines at work on the
192.168.2.0/24 network that I access from home over openvpn. So I can't
grab 192.168.2 at home. But I always bring home one of many different
machines - they're already configured to 192.168.2.214. It's so
convenient to be able to access all of 192.168.2 over openvpn _except_
for the one machine 192.168.2.214.

It's just a bit of a fag to re-configure each machine for home use -
particularly as it could be freebsd, linux (x 4 distros), Solaris, AIX,
SCO OS5, SCO UW7, HPUX etc etc and they all configure in different ways.
 


Bob

I'm having a hard time imagining how the packets are finding their way 
back during your linux testing.  How does 2.214 know what to do with the 
reply when it recieves the echo request from 254.245?  Was openvpn up 
during you linux testing and down during your freebsd testing?  Can we 
see your linux routing tables during the various stages?


Is it possible to preconfigure the servers to your home subnet instead 
of 192.168.2.214?  or additionally?  it shouldn't cause any dramas if 
your home subnet dosen't appear at work.


Richard
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD routing

2005-10-18 Thread Richard Burakowski

Bob Hepple wrote:


Well, it has to be taught ... eg with a FreeBSD 2.214 I can do this:
route delete default
route add -net 192.168.254.0 -interface xl0 # !!!
route add default 192.168.254.245
cp /etc/resolv.conf.home /etc/resolv.conf
 


well, my turn ...

from the man page:
   If the destination is directly reachable via an interface requiring no
   intermediary system to act as a gateway, the -interface modifier should
   be specified; the gateway given is the address of this host on the 
common

   network, indicating the interface to be used for transmission.

what i've now come to understand hinges on the phrase address of this 
host on the common network, indicating the interface to be used for 
transmission..  note this is not *the* interface.  for ethernet, it's 
the local interface and the destination's mac address.  the format of 
this address is partly described in link_addr(3).


route add 192.168.2.214/32 -link -interface rl0:x:x:x:x:x:x

if you want the kernel to use arp to find the mac address, you 
specifically have to tell it to:


route add 192.168.2.214/32 -interface rl0 -cloning

a giveaway should have been the duplicate mac addresses in your routing 
tables which we all missed.


cheers,

richard
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]